5 matches found
UBUNTU-CVE-2022-0605
Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in the Google Chrome Webstore API, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...
Just Williams Amazon Webstore - HTTP Response Splitting
Just Williams Amazon Webstore - HTTP Response Splitting source: https://www.securityfocus.com/bid/13428/info Amazon Webstore is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may explo...
CVE-2001-1344
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by 1 inserting a null character or 2 .. dot dot...
CVE-2001-1343
wsmail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter...